zing/laravel-flysystem-obs

Maintainerscaution

Only one registry publishing account is listed, leaving limited publishing continuity, although the repository shows recent release work.

Release historycaution

The project is mature at about 5 years old with 24 releases, but only one release appeared in the last 12 months despite a much faster historical median interval.

Repo commit activitycaution

The repository recorded zero commits and zero active maintainers in the last 3 months, which is a meaningful recent-maintenance gap despite the recent release.

Security policycaution

The repository has no published security policy, reducing transparency about vulnerability reporting and response.

Workflow auditcaution

All 11 analyzed action references are unpinned, and a high-confidence medium-severity archived action was found. The pull_request_target trigger has no untrusted checkout or script-injection sink, and workflows do not use top-level write permissions, so this is a hygiene concern rather than a severe workflow risk.